import jcifs.internal.util.SMBUtil;
import jcifs.smb.SID;


/**
 * Internal use only
 * 
 * @internal
 */
public class SecurityDescriptor implements SecurityInfo {

    /**
     * Descriptor type
     */
    private int type;

    /**
     * ACEs
     */
    private ACE[] aces;
    private SID ownerUserSid, ownerGroupSid;


    /**
     * 
     */

    static final String TEST_DOMAIN_SHORT = "test.domain.netbios";
    static final String TEST_DOMAIN_SID = "test.domain.sid";
    static final String TEST_DOMAIN_DC = "test.domain.dc";
    static final String TEST_USER_SID = "test.user.sid";

    static final String TEST_GROUP_SID = "test.group.sid";
    static final String TEST_GROUP_NAME = "test.group.name";

    static final String TEST_CONFIG_DIR = "test.config.dir";

        resp = new Trans2FindFirst2Response();

        if( log.level >= 3 )
            log.println( "doFindFirstNext: " + req.path );

        send( req, resp );

        sid = resp.sid;
        req = new Trans2FindNext2( sid, resp.resumeKey, resp.lastName );

        /* The only difference between first2 and next2 responses is subCommand
         * so let's recycle the response object.
         */

    public SamrDomainHandle(DcerpcHandle handle,
                SamrPolicyHandle policyHandle,
                int access,
                rpc.sid_t sid) throws IOException {
        this.handle = handle;
        MsrpcSamrOpenDomain rpc = new MsrpcSamrOpenDomain(policyHandle, access, sid, this);
        handle.sendrecv(rpc);
        if (rpc.retval != 0)
            throw new SmbException(rpc.retval, false);
    }

    private boolean opened;


    public SamrDomainHandle ( DcerpcHandle handle, SamrPolicyHandle policyHandle, int access, rpc.sid_t sid ) throws IOException {
        this.handle = handle;
        MsrpcSamrOpenDomain rpc = new MsrpcSamrOpenDomain(policyHandle, access, sid, this);
        handle.sendrecv(rpc);
        if ( rpc.retval != 0 ) {
            throw new SmbException(rpc.retval, false);
        }

 * "The .NET Developer's Guide to Windows Security" (which is also
 * available online).
 * <p>
 * Direct ACEs are evaluated first in order. The SID of the user performing
 * the operation and the desired access bits are compared to the SID
 * and access mask of each ACE. If the SID matches, the allow/deny flags
 * and access mask are considered. If the ACE is a "deny"
 * ACE and <i>any</i> of the desired access bits match bits in the access

            c = "Trans2FindFirst2Response[";
        } else {
            c = "Trans2FindNext2Response[";
        }
        return new String( c + super.toString() +
            ",sid=" + sid +
            ",searchCount=" + numEntries +
            ",isEndOfSearch=" + isEndOfSearch +
            ",eaErrorOffset=" + eaErrorOffset +
            ",lastNameOffset=" + lastNameOffset +

    public static final int NT_STATUS_ACCOUNT_DISABLED = 0xC0000072;
    public static final int NT_STATUS_NONE_MAPPED = 0xC0000073;
    public static final int NT_STATUS_INVALID_SID = 0xC0000078;
    public static final int NT_STATUS_DISK_FULL = 0xC000007f;
    public static final int NT_STATUS_INSTANCE_NOT_AVAILABLE = 0xC00000ab;
    public static final int NT_STATUS_PIPE_NOT_AVAILABLE = 0xC00000ac;

    @Override
    public SID getOwnerUser () throws IOException {
        return getOwnerUser(true);
    }


    @Override
    public SID getOwnerUser ( boolean resolve ) throws IOException {
        try ( SmbTreeHandleImpl th = ensureTreeConnected() ) {
            SecurityDescriptor desc = querySecurity(th, SecurityInfo.OWNER_SECURITY_INFO);
            SID ownerUser = desc.getOwnerUserSid();

public class UserInfoHelper {
    protected static final String USER_BEAN = "lastaflute.action.USER_BEAN.FessUserBean";

    protected int resultDocIdsCacheSize = 20;

    protected String cookieName = "fsid";

    protected String cookieDomain;

    protected int cookieMaxAge = 30 * 24 * 60 * 60;// 1 month

    protected String cookiePath = "/";

    protected Boolean cookieSecure;